Remote control system for a locomotive having user authentication capabilities

ABSTRACT

The present invention provides a remote control system for a locomotive. The remote control system comprises a remote control device, an identification interface and a locomotive controller module. The remote control device is operative for receiving a command signal indicative of an action to be executed by the locomotive. The identification interface is adapted for receiving user identification data from a user of the remote control device. The locomotive controller module is suitable for mounting at the locomotive and is adapted for generating local control signals. When the user identification data belongs to an authorized user, the locomotive controller module is operative to issue a local control signal for causing the locomotive to execute the action conveyed by the command signal received at the remote control device.

FIELD OF THE INVENTION

The present invention relates generally to a remote control system fortransmitting signals to a locomotive. More particularly, the presentinvention relates to a remote control system which can determine if apotential user of the control system is an authorized user.

BACKGROUND OF THE INVENTION

Remote control systems for controlling locomotives are known in the art.Typically, remote control systems for locomotives have two maincomponents, namely a remote control device and a locomotive controllermodule. The remote control device is generally a portable unit that iscarried by a human operator located at a certain distance from thelocomotive. The remote control device is operative for sending commandsignals to the locomotive controller module. The locomotive controllermodule is typically mounted on board the locomotive and is adapted forreceiving command signals sent by the remote control device over awireless communication link.

When an operator would like to cause a movement of the locomotive in acertain direction, or at a certain speed, for example, he or shemanipulates the controls on the remote control device in order tospecify the desired parameters (i.e. forward, backwards, speed, etc . .. ). The parameters are encoded into a command signal, which is thensent by the remote control device to the locomotive control device. Thelocomotive control device processes the command signal and issues localcontrol signals to a control interface for causing the desired commandsto be implemented by the locomotive.

A deficiency with existing remote control systems is that there areoften no adequate security features for restricting who is able to usethe remote control system for controlling a locomotive. Morespecifically, in many existing remote control systems, anyone can pickup the remote control device and start controlling a locomotive. Forsecurity reasons, it is not desirable for a person who is not familiarwith the locomotives, or who is not authorized to use the remote controlsystem, to be able to use the remote control device to operate thelocomotive. Furthermore, in the case where an accident occurs with alocomotive, a locomotive owner is generally unable to reliably determinewho was controlling the locomotive at the time of the accident.

In the context of the above, it can be seen that there is a need in theindustry to provide a remote control system that alleviates, at least inpart, the problems associated with the existing remote control systems.

SUMMARY OF THE INVENTION

In accordance with a first broad aspect, the present invention providesa remote control system for a locomotive. The remote control systemcomprises a remote control device, an identification interface and alocomotive controller module. The remote control device is operative forreceiving a command signal conveying an action to be executed by thelocomotive. The identification interface is located remotely from theremote control device and is adapted for receiving user identificationdata from a user of the remote control device. The locomotive controllermodule is suitable for mounting at the locomotive and is adapted forgenerating local control signals. When the user identification databelongs to an authorized user, the locomotive controller module isoperative to issue a local control signal for causing the locomotive toexecute the action conveyed by the command signal received at the remotecontrol device.

In accordance with another broad aspect, the present invention providesa remote control device for controlling a locomotive. The remote controldevice comprises a first input, a second input and a processing unit.The first input is operative for receiving from a user a command signalindicative of a command to be executed by the locomotive. The secondinput is distinct from the first input and is for receiving useridentification data. The processing unit is operative for transmittingthe control signal indicative of a command to be executed by thelocomotive when the user identification data belongs to an authorizeduser.

In accordance with another broad aspect, the present invention providesa remote control system for a locomotive. The remote control systemcomprises a remote control device, a user authentication unit and alocomotive controller module. The remote control device includes a firstinput for receiving an input command signal from a user indicative of acommand to be executed by the locomotive. The remote control device alsoincludes a second input distinct from the first input and which is forreceiving user identification data. The user authentication unit is incommunication with the remote control device and is adapted forreceiving the user identification data from the remote control deviceand processing the user identification data to generate verificationdata indicative of whether the user identification data belongs to anauthorized user. The locomotive controller module is suitable formounting at the locomotive and is adapted for generating local controlsignals on the basis of command signals originating from the remotecontrol device. When the verification data indicates that the useridentification data belongs to an authorized user, the locomotivecontroller module issues a local control signal for causing thelocomotive to execute the command conveyed by the command signalreceived at the first input of the remote control device.

In accordance with another broad aspect, the present invention providesa method for controlling a locomotive. The method comprises receiving ata first input a command signal from a user indicative of a command to beexecuted by the locomotive and receiving at a second input, distinctfrom the first input user, identification data. The method furthercomprises transmitting a control signal indicative of the command to beexecuted by the locomotive when the user identification data belongs toan authorized user.

In accordance with another broad aspect, the present invention providesa remote control device for controlling a locomotive. The remote controldevice comprises a first input, a second input, a user authenticationunit and a processing unit. The first input is for receiving a commandsignal from a user indicative of a command to be executed by thelocomotive and the second input is operative to receive useridentification data from a machine readable storage medium. The userauthentication unit is operative for processing the user identificationdata to generate verification data indicative of whether the useridentification data belongs to an authorized user. The processing unitis operative for transmitting a control signal indicative of the commandto be executed by the locomotive when the verification data indicatesthat the user identification data belongs to an authorized user.

In accordance with an alternative aspect of the present invention, thesecond input is operative to receive user identification data from auser's fingerprint, from a keypad, from a retinal scanner, or from a DNAsample.

In accordance with an another broad aspect, the present inventionprovides a remote control system for a locomotive. The remote controlsystem comprises a remote control device, a user authentication unit anda locomotive controller module. The remote control device includes afirst input and a second input. The first input is for receiving acommand signal from a user indicative of an action to be executed by thelocomotive and the second input is operative for receiving useridentification data from a machine readable storage medium. The userauthentication unit is in communication with the remote control device,and is adapted for receiving the user identification data from theremote control device and processing the user identification data togenerate verification data indicative of whether the user identificationdata belongs to an authorized user. The locomotive controller module issuitable for mounting at the locomotive. The locomotive controllermodule is adapted for generating local control signals on the basis ofcommand signals originating from the remote control device. When theverification data indicates that the user identification data belongs toan authorized user, the locomotive controller module is operative toissue a local control signal for causing the locomotive to execute theaction conveyed by the command signal received at the first input of theremote control device.

In accordance with another broad aspect, the present invention providesa remote control device for controlling a locomotive. The remote controldevice comprises a first input, a second input and a processing unit.The first input is operative for receiving a command signal from a userindicative of a command to be executed by the locomotive and the secondinput is operative to receive user identification data. The remotecontrol device is operative to prompt the user to provide useridentification data. The processing unit is operative to transmit acontrol signal indicative of a command to be executed by the locomotivewhen the user identification data is determined to belong to anauthorized user.

In accordance with yet another broad aspect, the present inventionprovides a remote control system for a locomotive. The remote controlsystem comprises a remote control device, a user authentication unit anda locomotive controller module. The remote control device includes afirst input and a second input. The first input is for receiving acommand signal from a user indicative of an action to be executed by thelocomotive and the second input is operative for receiving useridentification data. The remote control system is operative forprompting the user to input the user identification data. The userauthentication unit receives the user identification data from theremote control device and processes the user identification data togenerate verification data indicating whether the user identificationdata belongs to an authorized user. The locomotive controller module issuitable for mounting at the locomotive. The locomotive controllermodule is adapted for generating local control signals on the basis ofcommand signals originating from the remote control device. When theverification data indicates that the user identification data belongs toan authorized user, the locomotive controller module issues a localcontrol signal for causing the locomotive to execute the action conveyedby the command signal received at the first input of the remote controldevice.

In accordance with another broad aspect, the present invention providesa remote control device for controlling a locomotive. The remote controldevice comprises a first input, a second input, an authentication unitand a processing unit. The remote control device is operative forreceiving a command signal from a user indicative of a command to beexecuted by the locomotive. The second input is operative for receivinguser identification data. The authentication unit is operative forprocessing the user identification data to generate verification dataindicative of whether the user identification data belongs to anauthorized user. The processing unit is operative for transmitting acontrol signal indicative of a command to be executed by the locomotivewhen the user authentication unit confirms that the user identificationdata belongs to an authorized user. The processing unit is responsive toa transmission termination event to cease the transmission of controlsignals indicative of commands to be executed by the locomotive.

In accordance with yet another broad aspect, the present inventionprovides a remote control system for a locomotive. The remote controlsystem comprises a remote control device, a user authentication unit anda locomotive controller module. The remote control device includes afirst input and a second input. The first input is for receiving commandsignals from a user indicative of an action to be executed by thelocomotive and the second input is operative for receiving useridentification data. The user authentication unit receives the useridentification data from the remote control device and processes theuser identification data to generate verification data indicative ofwhether the user identification data belongs to an authorized user. Thelocomotive controller module is suitable for mounting at the locomotiveand is operative for generating local control signals on the basis ofcommand signals originating from the remote control device and issuing alocal control signal for causing the locomotive to execute the actionconveyed by the command signal received at the first input of the remotecontrol device, when the verification data indicates that the useridentification data belongs to an authorized user. In response to atransmission termination event, the locomotive controller module isadapted to cease the transmission of local control signals.

These and other aspects and features of the present invention will nowbecome apparent to those of ordinary skill in the art upon review of thefollowing description of specific embodiments of the invention inconjunction with the accompanying drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

In the accompanying drawings:

FIG. 1 shows a block diagram of a remote control system in accordancewith a first specific example of implementation of the presentinvention;

FIG. 2 shows a block diagram of a remote control system in accordancewith a second specific example of implementation of the presentinvention;

FIG. 3 shows a block diagram of a remote control system in accordancewith a third specific example of implementation of the presentinvention;

FIG. 4 shows a specific, non-limiting example of a physical embodimentof a remote control device in accordance with a non-limiting example ofimplementation of the present invention;

FIG. 5 shows a flow chart of a process for operating the remote controlsystem in accordance with a first specific example of implementation ofthe present invention;

FIG. 6 shows a flow chart of process for opreating the remote controlsystem in accordance with a second specific example of implementation ofthe present invention;

FIG. 7 shows a flow chart of a process for operating the remote controlsystem in accordance with a third specific example of implementation ofthe present invention; and

Other aspects and features of the present invention will become apparentto those ordinarily skilled in the art upon review of the followingdescription of specific embodiments of the invention in conjunction withthe accompanying figures.

DETAILED DESCRIPTION

Shown in FIG. 1 is a block diagram of a remote control system 10 inaccordance with a first specific example of implementation of thepresent invention. The remote control system 10 includes a remotecontrol device 12, a locomotive controller module 14 that is adapted forbeing mounted on board a locomotive 18, an identification interface 20,and a user authentication unit 22. As will be described in more detailfurther on in the description, the identification interface 20 isoperative for receiving user identification data from a user. Thereceived user identification data is forwarded to the userauthentication unit 22, which determines if the user identification databelongs to an authorized user of the remote control system 10.

The remote control device 12 includes an input 24 for receiving commandsignals from a user that are indicative of commands to be executed bythe locomotive 18. The command signals can convey any useful commandsincluding but not limited to speed commands, braking commands, directioncommands, throttle commands, coast commands, etc . . . . The remotecontrol device 12 further includes a processing unit 28 that is incommunication with input 24 for receiving the command signals. Theprocessing unit 28 transmits signals conveying the commands to beexecuted by the locomotive 18 to the locomotive controller module 14over a wireless communication link 26.

In a specific embodiment of the present invention, the remote controldevice 12 is a portable unit that can be carried by an operator locatedremotely from the locomotive 18. However, in an alternative embodiment,the remote control device 12 is a fixed device that is mounted at aremote location from the locomotive 18, such as in a control tower or inan operator station.

As mentioned above, the locomotive controller module 14 is suitable forbeing mounted at a locomotive 18. The locomotive controller module 14includes an input 30 for receiving the signals sent from the remotecontrol device 12 over the wireless communication link 26. Thelocomotive controller module 14 further includes a processing module 32for generating local control signals on the basis of the signals sentfrom the remote control device 12. As will be described in more detailfurther on in the description, when the user identification data enteredat the identification interface 20 belongs to an authorized user of theremote control system 10, the processing module 32 is able to issue thelocal control signals to a control interface 34 for causing thelocomotive to execute the commands conveyed by the signal sent by theremote control device 12.

For the purposes of the present description, the term “control interface34” refers globally to the collection of various actuators located onthe train for executing various local control signals issued by thelocomotive controller module 14. Examples of such actuators include theactuators that control the throttle and the brakes, among others.

The identification interface 20 is operative for receiving useridentification data entered by a user. In a specific example ofimplementation, the user identification data includes user-suppliedinformation such as a code entered via a keypad or touch sensitivescreen or the use of a personalised key. Alternatively, theuser-supplied information can be stored on a computer readable storagemedium such as, for example, a swipe card, smart card/and PDA. In afurther specific example of implementation, the user identification dataincludes a biometrics parameter, such as fingerprint data, retinal scandata, voice-recognition data, DNA data and body part shape or patterndata.

It should be understood that the identification interface 20 includeshardware and software that is adapted for receiving the useridentification data. As such, the identification interface 20 caninclude a keypad, a touch-sensitive screen, an input capable of readinga computer readable storage medium, a key hole, a fingerprint reader, aretinal scan reader, a voice interface or any other suitable type ofreader known in the art for receiving user identification data.

In the specific example of implementation shown in FIG. 1, theidentification interface 20 is in communication with the userauthentication unit 22. The user authentication unit 22 is operative forreceiving the user identification data and for processing the useridentification data in order to generate verification data indicatingwhether the user identification data belongs to an authorized user ofthe remote control system 10.

In a specific example of implementation, the user authentication unit 22includes a memory (not shown) for storing a database containinginformation associated to authorized users of the remote control system10. As such, upon receipt of user identification data from theidentification input 20, the user authentication unit 22 processes theuser identification data along with the database to determine if thereceived user identification data matches data stored in the databasethat is associated to an authorized user.

For example, in the specific case where the user identification data isfingerprint information, the user authentication unit 22 includes adatabase that stores fingerprint information associated with authorizedusers of the remote control system 10. As such, upon receipt offingerprint information from the identification interface 20, the userauthentication unit 22 processes the entries in the database todetermine if the received fingerprint information matches fingerprintinformation contained in the database. In the case where a match isfound, the user authentication unit 22 generates verification dataindicating that the user identification data belongs to an authorizeduser. However, if no match is found, the user authentication unit 22generates verification data indicating that the user identification datadoes not belong to an authorized user. The authentication unit 22 mayuse any suitable fingerprint matching algorithm and the presentinvention is not limited to the specific algorithm used for performingfingerprint matching. Such algorithms are known in the art offingerprint processing and as such will not be described.

Similar systems may be implemented using biometric information otherthan fingerprint information, such as, but not limited to, voicerecognition, DNA data, retinal scan and body shape/pattern data.

Alternatively, in the specific case where the user identification datais a pass code, the user authentication unit 22 includes a database thatstores a plurality of pass codes associated respective authorized usersof the remote control system 10. Upon receipt of a pass code from theidentification interface 20, the user authentication unit 22 processesthe database to determine if the received pass code matches a pass codecontained in the database. In the case where a match is found, the userauthentication unit 22 generates verification data indicating that theuser identification data belongs to an authorized user. However, if nomatch is found, the user authentication unit 22 generates verificationdata indicating that the user identification data does not belong to anauthorized user.

In the specific case where the user identification data is stored on aswipe card, the user identification data can include information thatindicates to the user authentication unit 22 that it belongs to anauthorized user. As such, on the basis of the information, the userauthentication unit 22 generates validation data indicative that theswipe card belongs to an authorized user, or that the swipe card doesnot belong to an authorized user. However, the user authentication unitis not able to attribute the swipe card to a specific authorized user.

In an alternative embodiment where the user identification data isstored on a swipe card, the user identification data can includeinformation that is unique to a specific user. In such a case, the userauthentication unit 22 includes a database that stores informationassociated with authorized users of the remote control system 10. Assuch, upon receipt of the unique information from the swipe card, theuser authentication unit 22 processes the database to determine if theinformation from the swipe card matches an entry contained in thedatabase. In the case where a match is found, the user authenticationunit 22 generates verification data indicative that the useridentification data belongs to an authorized user. However, if no matchis found, the user authentication unit 22 generates verification dataindicative that the user identification data does not belong to anauthorized user.

When the user identification data is unique to a specific user, such asa fingerprint, retinal data, DNA data, a unique pass code, or uniqueinformation stored on a swipe card, the user authentication unit 22 isable to determine which authorized user has entered his/her useridentification information. As such, in a specific example ofimplementation, the user authentication unit 22 includes a memory inwhich it is able to keep a record of the log-in time of the authorizeduser. Optionally, the user authentication unit 22 is able to keep arecord of the log-out time of an authorized user on the basis oftransmission termination events, which will be described in more detail.Beneficially, by keeping a record of a specific user's log-on andlog-off times, an administrator of the remote control system 10 is ableto know who was using the remote control device 12 during a certain timeperiod.

In a variant, in order for the user authentication unit 22 to generatevalidation data indicating that the user identification data belongs toan authorized user, the user authentication unit 22 may make use of acombination of information data elements from the user. For example, theuser authentication unit 22 may require fingerprint information as wellas a pass code from the user in order to determine if the user is anauthorized user.

In the embodiment shown in FIG. 1, the user authentication unit 22 is incommunication with the processing unit 28 of the remote control device12 over a communication link 36. Preferably, communication link 36 is awireless communication link such as a radio-frequency communication linkor an infrared communication link, however, it is within the scope ofthe present invention for communication link 36 to be a wirelinecommunication link.

In a specific example of implementation, when the user authenticationunit 22 generates verification data indicating that the useridentification data belongs to an authorized user, the userauthentication unit 22 transmits a verification signal to the remotecontrol device 12 over communication link 36. Upon receipt of thatverification signal, the processing unit 28 transmits the commandsconveyed by the signals received at input 24 to the locomotivecontroller module 14. In this fashion, an authorized user is able tocontrol the locomotive 18.

However, when the user authentication unit 22 generates verificationdata indicating that the user identification data does not belong to anauthorized user, the user authentication unit 22 does not transmit averification signal to the processing unit 28. In the absence of theverification signal, the processing unit 28 does not transmit signalsconveying the commands to the locomotive controller module 14. In analternative embodiment, when the user authentication unit 22 generatesverification data indicating that the user identification data does notbelong to an authorized user, the user authentication unit 22 transmitsa verification signal indicating that the user identification data doesnot belong to an authorized user. In response to this verificationsignal the processing unit 28 does not transmit command signals to thelocomotive controller module 14. In either case, an unauthorized user isunable to operate the locomotive 18.

In a variant, the authentication unit 22 is in communication with thelocomotive controller module 14 over a communication link 38 (indicatedby dotted lines in FIG. 1) instead of communication link 36. Preferably,communication link 38 is a wireless communication link such as aradio-frequency communication link or an infrared communication link,however, it is within the scope of the present invention forcommunication link 38 to be a wire-line communication link. In addition,communication link 38 can be distinct from communication link 26, oralternatively, they can be the same communication link. For example,communication link 26 and communication link 38 might share the same RFfrequency.

In this variant, the processing unit 28 of the remote control device 12transmits the command signals to the locomotive controller module 14over communication link 26 regardless of whether they are entered by anauthorized user. As such, it is the processing module 32 that receivesverification signals from the user authentication unit 22 indicatingwhether the user is an authorized user. In a specific example ofimplementation, when the user authentication unit 22 generatesverification data indicating that the user identification data belongsto an authorized user, the user authentication unit 22 transmits averification signal to the processing module 32 over communication link38. In response to the verification signal, the processing module 32issues local control signals to the control interface 34 for causing thelocomotive to execute the commands received at input 24 of the remotecontrol device 12. As such, an authorized user is able to control thelocomotive 18.

When the user authentication unit 22 generates verification dataindicating that the user identification data does not belong to anauthorized user, the user authentication unit 22 does not transmit averification signal to the processing module 32. In the absence of averification signal, the processing module 32 does not issue localcontrol signals to the control interface 34. In an alternativeembodiment, when the user authentication unit 22 generates verificationdata indicating that the user identification data does not belong to anauthorized user, the user authentication unit 22 transmits to thelocomotive controller module 14 a verification signal indicating thatthe user identification data does not belong to an authorized user. Inresponse to this verification signal, the processing module 32 does notissue local control signals to the control interface 34. As such, anunauthorized user is unable to operate the locomotive 18.

The above process will be described in more detail herein below withreference to the flow chart shown in FIG. 5 and with reference toFIG. 1. At step 52 a command signal conveying a command to be executedby the locomotive 18 is received at input 24 of the remote controldevice 12. At step 54, user identification data is received atidentification interface 20. At step 56, the user authentication unit 22processes the user identification data in order to determine if itbelongs to an authorized user. At step 58, when the user authenticationunit 22 determines that the user identification data belongs to anauthorized user, the processing module 32 of the locomotive controldevice 14 is enabled to transmit local control signals to the controlinterface 34 for causing the locomotive to execute the commands conveyedby the signal provided at the remote control device 12. For step 58, theuser authentication unit 22 can send the verification signal to theremote control device 12 or to the locomotive controller module 14 toenable local control signals to be sent to the control interface 34.

FIG. 5 shows step 52 as being performed independently of steps 54 and56. In other words, receiving a command signal at input 24 is notnecessarily dependent on receiving user identification data at theidentification interface 20. It is within the scope of the invention forthe remote control device 12 to receive and transmit a plurality ofsignals conveying commands received at input 24 over communication link36 having only received user identification data once. For example, auser may only need to enter user identification data when he or shestarts using the remote control device 12, and then doesn't need toenter user identification data again. The different scenarios in whichthe locomotive controller module 14 will cease transmitting localcontrol signals to the control interface 34 will be described in moredetail later on in the specification.

In an alternative example of implementation, user identification datacan be entered by the user each time the user enters a command signal atinput 24. As such, the user's authorisation is verified each time acommand is entered at input 24.

In the specific example of implementation shown in FIG. 1, theidentification interface 20 and the authentication unit 22 are locatedremotely from the remote control device 12 and the locomotive controllermodule 14. For example, they may be located at a central control tower,or at a location where the remote control devices 12 are stored. Assuch, a user can enter his/her user identification data at theidentification interface 20 when they pick up their remote controldevice 12 prior to entering a switchyard, or other location where theyare about to use the remote control device 12.

In an alternative embodiment (not shown in the Figures), theidentification interface 20 and the user authentication unit 22 arelocated at the locomotive 18. For example, they can both be connectedto, or can be an integral part of the locomotive controller module 14.

In a second specific example of implementation of the remote controlsystem 10 (shown in FIG. 2), the identification interface 20 and theuser authentication unit 22 are part of the remote control device 12. Assuch, input 24 for receiving a command signal from a user is a firstinput, and the identification interface 20 for receiving the useridentification data is a second input. In a specific example ofimplementation, the identification interface 20 can be distinct from theinput 24. For the purposes of the present description, the term“distinct” means that it is separate from the first input 24.Preferably, the identification interface is dedicated to receive useridentification data. In other words in this specific implementation, theidentification interface 20 is not used by a user of the remote controldevice 12 for entering command signals. Alternatively, theidentification interface 20 is embodied in the same physical input asinput 24. For example, the user might enter user identification data viaa keypad that can also be used for entering speed information.

In the embodiment shown in FIG. 2, the processing unit 28 of the remotecontrol device 12 is operative for transmitting command signals to thelocomotive controller module 14 when the user authentication unit 22determines that the user identification data received at input 20belongs to an authorized user. This method will be described in moredetail with reference to the flow chart shown in FIG. 6. At step 60 acommand signal indicative of a command to be executed by the locomotive18 is received at the first input 24 of the remote control device 12. Atstep 62, user identification data is received at the secondinput/identification interface 20 of the remote control device 12. Atstep 64, the user authentication unit 22 processes the useridentification data in order to determine if it belongs to an authorizeduser. At step 66, when the user identification data belongs to anauthorized user, the processing unit 28 transmits the command conveyedby the signal received at input 24 to the locomotive controller module14. In such an embodiment, the processing module 32 issues local controlsignals to the control interface for causing the locomotive to executethe commands conveyed by the remote control device 12.

As described above it is within the scope of the invention for theremote control device 12 to transmit a plurality of signals conveyingcommands received at input 24 over communication link 36 having onlyreceived user identification data at the second input 20 once. Forexample, a user may only need to enter user identification data when heor she starts using the remote control device 12, and then doesn't needto enter user identification data again. The different scenarios inwhich the remote control device 12 will cease transmitting signals tothe locomotive controller module 14 will be described in more detailbelow.

In another specific example of implementation of the remote controlsystem 10, the identification interface 20 and the user authenticationunit 22 are located at separate locations. For example, in anon-limiting example of implementation, the identification interface 20can be located at the remote control device 12 and the userauthentication device can be located either remotely from both theremote control device 12 and the locomotive controller module 14, or asshown in FIG. 3, the user authentication unit 22 can be located at thelocomotive controller module 14.

In the example of implementation shown in FIG. 3, the processing unit 28of the remote control device 12 transmits both the command signal andthe user identification data to the locomotive controller module 14 overwireless communication link 26. As such, the user authentication unit 22processes the user identification data when it arrives at the locomotivecontrol unit 14. This method will be described in more detail withreference to the flow chart shown in FIG. 7. At step 70 a command signalconveying a command to be executed by the locomotive 18 is received atthe first input 24 of the remote control device 12. At step 72, useridentification data is received at the second input/identificationinterface 20 of the remote control device 12. At step 74, the processingunit 28 of the remote control device transmits both the command signaland the user identification data to the locomotive controller module 14.At step 76 the user authentication unit 22 processes the useridentification data in order to determine if it belongs to an authorizeduser. At step 78, when the user authentication unit 22 determines thatthe user identification data belongs to an authorized user, theprocessing module 32 becomes operative for issuing local control signalsto the control interface 34 for causing the locomotive 18 to execute thecommands conveyed by the command signal entered at the remote controldevice 12.

However, when the user authentication unit 22 determines that the useridentification data does not belong to an authorized user, theprocessing module 32 does not issue local control signals to the controlinterface 34. As such, an unauthorized user is unable to control thelocomotive 18.

It is within the scope of the invention for the processing module 32 ofthe locomotive controller module 14 to issue local control signals tothe control interface 34 having only received user identification dataat the second input 20 once. For example, a user may only need to enteruser identification data when he or she starts using the remote controldevice 12, and then doesn't need to enter user identification dataagain. The different scenarios in which the locomotive controller module14 will cease transmitting local control signals to the controlinterface 34 will be described in more detail below later on in thespecification.

Remote Control Device 12

In a specific example of implementation, the remote control device 12 isa portable remote control device 12 that is adapted for being carried bya human operator located at a certain distance from the locomotive 18. Aspecific, non-limiting, example of a physical layout of the remotecontrol device 12 is shown in FIG. 4. The remote control device 12 shownin FIG. 4 is in the form of a portable unit that includes a housing 40for enclosing the electronic circuitry, a battery for supplyingelectrical power (not shown) and a user interface 42 for enabling theuser to enter command signals conveying commands to be implemented bythe locomotive 18.

In the specific embodiment shown, the user interface 42 includes twodials 44 a and 44 b located on either side of the housing 40, that areable to be manipulated by a user in order to enter command data.Specifically, by manipulating dial 44 a located on the left, the user isable to enter brake commands. The brake command information is displayedto the user via display portion 46 shown on the front of the housing 40.By manipulating dial 44 b located on the right, the user is able toenter speed commands. The speed command information is displayed to theuser via display portion 48 shown on the front of the housing 40. Othercommands, such as on/off, bell/horn activation and forward/reverse, canbe entered via control knobs and buttons 50 located on the upper portionof the housing 40. Although a specific embodiment of a remote controldevice 12 has been described herein, it should be understood that thephysical implementation of the remote control device 12 can vary greatlywithout departing from the spirit of the invention.

In the case where the identification interface 20 is included as part ofthe remote control device 20, as described above with respect to FIGS. 2and 3, the user interface 42 of the remote control device 12 includes aninput 51 for receiving the user identification data. Preferably, theinput 51 is a distinct input designed for receiving user identificationdata. In the specific embodiment of a remote control device 12 shown inFIG. 4, the input 51 is a distinct input for receiving useridentification data in the form of fingerprint information.

In addition, the specific embodiment shown in FIG. 4 includes a visualprompt 53, in the form of a flashing light in order to prompt the userto enter user identification data. Other types of prompts 53 such asaudio prompts, text prompts or any other suitable form of prompt knownin the art could also be used without departing from the spirit of theinvention in order to instruct the user of the remote control unit 12 toprovide user identification data.

Preferably, the prompt would be active until a user enters useridentification data. The term “active” as used herein, means that theprompt indicates to the user that user identification data should beentered. For example, the prompt may flash intermittently, be lit up,display text, make a noise, or provide any other type of indication tothe user. Once the user has been identified as an authorized user, theprompt would cease to be active until a termination transmission eventoccurs, which will be described in more detail herein below.

Transmission Termination Events

Typically, in use, an operator of the remote control system 10 providesuser identification data when he or she wishes to start using the remotecontrol device 12. As such, once the user identification data has beendetermined by the user authentication unit 22 to belong to an authorizeduser, the user is enabled to control the locomotive 18 until atransmission termination event occurs. However, in response to atransmission termination event, the remote control system 10 prevents auser from controlling the locomotive 18 until new user identificationdata that belongs to an authorized user is provided. For example,depending on how the remote control system 10 is configured, thetransmission termination event could cause processing unit 28 of theremote control device 12 to cease transmitting signals conveyingcommands to the locomotive controller module 14. As such, once atransmission termination event occurs, the remote control device 12cannot control the locomotive 18 until new user identification data thatbelongs to an authorized user is received at the identificationinterface 20. Alternatively, the transmission termination event couldcause the processing module 32 to cease transmitting local controlsignals to the control interface 34.

In a first specific example of implementation, the transmissiontermination event causes a prompt signal to be provided by the user. Thesignal indicates to the user that the locomotive 18 cannot be controlledby a user until user identification data belonging to an authorized useris entered at the identification interface 20.

In a specific non-limiting example of implementation, the user interface42 of the remote control device 12 includes a user input for enablingthe user to enter the termination signal. As such, once the user of theremote control device 12 is finished using the remote control device 12,the user can simply activate the user input in order to enter thetermination signal. Upon receipt of the termination signal, theprocessing unit 28 of the remote control device 12 prevents commandsignals from being sent to the locomotive controller module 14 until newuser identification data belonging to an authorized user is entered atthe identification interface 20.

Alternatively, the user input for enabling the user to enter atermination signal could be located at the locomotive. As such, once theuser of the remote control device 12 is finished using the remotecontrol device 12, the user can simply activate the user input in orderto enter the termination signal. Upon receipt of the termination signal,the processing module 32 of the locomotive controller module 14 ceasesto transmit local control signals to the control interface 34 until newuser identification data belonging to an authorized user is entered atthe identification interface 20.

In an alternative example of implementation, the transmissiontermination event includes the expiration of a time delay commencingupon receipt at the identification interface 20 of a signal indicativeof user identification data that belongs to an authorized user. Forexample, when the user authentication unit 22 determines that the useridentification data entered at the identification interface 20 belongsto an authorized user, a timer is started. Upon expiration of apredetermined amount of time, a user is no longer able to control thelocomotive 18 via the remote control system 10. It should be understoodthat the timer can be included at either the user authentication unit22, the processing unit 28 of the remote control device 12, or theprocessing module 32 of the locomotive controller module 32. As such, inthe case where the timer is located at the processing unit 28 of theremote control device 12, or in the case where the timer is located atthe user authentication unit 22 that is in communication with the remotecontrol device 12, upon expiration of the predetermined amount of time,the processing unit 28 ceases to transmit signals indicative of commandsentered at input 24 to the locomotive controller module 14. In the casewhere the timer is located at the processing module 32 of the locomotivecontroller module 14, or in the case where the timer is located at theuser authentication unit 22 that is in communication with the locomotivecontroller module 14, upon expiration of the predetermined amount oftime, the processing module 32 ceases to transmit local control signalsto the control interface 34.

The pre-determined amount of time can be a specific amount of time, suchas 6 hours, which might represent the working shift of a user of theremote control device 12. As such, the user would enter his or her useridentification data at the beginning of a shift and be able to controlthe locomotive 18 throughout the length of his or her shift. However,when the shift is over, such as after the pre-determined 6 hours, remotecontrol system 10 would automatically stop controlling the locomotive 18until new user identification data belonging to an authorized user isentered at the identification interface 20.

In an alternative example of implementation, the transmissiontermination event can include the expiration of a time delay duringwhich no signal indicative of a command to be executed by the locomotiveis received at input 24 of the remote control device 12. In such anembodiment, a timer located at the remote control device 12 would begineach time a user enters a command signal at input 24, such that eachtime the user enters a new command the timer is reset. Upon theexpiration of a pre-determined time delay during which no command signalis received at input 24, the remote control system 10 wouldautomatically stop controlling the locomotive 10, until new useridentification data is received at the identification interface 20.

In yet another alternative example of implementation, the remote controlsystem 10 does not receive a transmission termination event, and assuch, user identification data must be entered by the user each time theuser enters a command signal at input 24. As such, the user'sauthorisation is verified each time a command is entered.

In a further specific example of implementation, the processing unit 28of the remote control device 12 is in communication with a memory unitsuitable for storing a history of the commands entered by a specificuser. For example, once the user has entered his or her useridentification data the processing unit 28 is able to access a fileassociated to that user. The file may include data elements indicativeof the user's name, the times and dates when that user was using theremote control device 12, and a list of commands entered by that user.In addition, once the user has entered his or her user identificationdata, the processing unit 28 is further able to add to that file all thecommands entered by the user during the time he or she uses the remotecontrol device 12. Such a feature is advantageous for security reasonsbecause it enables an owner, or other administrator of the remotecontrol system 10, to determine who was operating the remote controldevice 12 at all times. Alternatively, the memory is with theauthentication unit 22 and only stores login and logoff times.

Although the present invention has been described in considerable detailwith reference to certain preferred embodiments thereof, variations andrefinements are possible without departing from the spirit of theinvention. Therefore, the scope of the invention should be limited onlyby the appended claims and their equivalents.

1. A remote control system for a locomotive, comprising: (a) a remotecontrol device for receiving a command signal conveying an action to beexecuted by the locomotive; (b) an identification interface locatedremotely from said remote control device, said identification interfacebeing adapted for receiving user identification data by a user of theremote control device; (c) a locomotive controller module suitable formounting at the locomotive, said locomotive controller module beingadapted for generating local control signals; (d) when the useridentification data belongs to an authorized user, said locomotivecontroller module being operative to issue a local control signal forcausing the locomotive to execute the action conveyed by the commandsignal received at the remote control device.
 2. A remote control systemas defined in claim 1, wherein said identification interface is suitablefor being located at the locomotive.
 3. A remote control system asdefined in claim 1, wherein said identification interface is connectedto said locomotive controller module.
 4. A remote control system asdefined in claim 1, wherein said identification interface is an integralpart of said locomotive controller module.
 5. A remote control system asdefined in claim 1, wherein said identification interface is locatedremotely from said remote control device and said locomotive controllermodule.
 6. A remote control system as defined in claim 1, wherein saidsystem further includes a user authentication unit in communication withsaid identification interface, said user authentication unit beingadapted for: (a) receiving the user identification data from saididentification interface; and (b) processing the user identificationdata to generate verification data indicative of whether the useridentification data belongs to an authorized user.
 7. A remote controlsystem as defined in claim 6, wherein said user authentication unit isin communication with said remote control device, said remote controldevice being operative for transmitting a signal conveying the commanddata to the locomotive controller module when the user authenticationunit determines that the user identification data belongs to anauthorized user.
 8. A remote control system as defined in claim 5,wherein said remote control system is adapted for storing data relatingto command signals entered at said remote control device by theauthorized user.
 9. A remote control system as defined in claim 1,wherein said user identification data includes a biometrics parameter.10. A remote control system as defined in claim 9, wherein saidbiometrics parameter is selected from the set consisting of fingerprintdata, retinal scan data, voice recognition data, DNA data and body partshape/pattern data.
 11. A remote control system as defined in claim 1,wherein said user identification data includes user-suppliedinformation.
 12. A remote control system as defined in claim 11, whereinsaid identification interface includes either one of a keypad and touchsensitive screen for entering said user-supplied information.
 13. Aremote control system as defined in claim 11, wherein said user-suppliedinformation is stored on a computer readable storage medium, saididentification interface including an input adapted for reading saidcomputer readable storage medium for extracting said user-suppliedinformation.
 14. A remote control device for controlling a locomotive,said remote control device comprising: (a) a first input for receiving acommand signal from a user, the command signal being indicative of acommand to be executed by the locomotive; (b) a second input distinctfrom said first input, said second input being adapted for receivinguser identification data; (c) a processing unit operative to transmit acontrol signal indicative of a command to be executed by the locomotivewhen the user identification data belongs to an authorized user.
 15. Aremote control device as defined in claim 14, further comprising a userauthentication unit that is in communication with said second input,said user authentication unit being adapted for: (a) receiving the useridentification data; and (b) processing the user identification data togenerate verification data indicative of whether the user identificationdata belongs to an authorized user.
 16. A remote control device asdefined in claim 14, wherein said remote control device is adapted forstoring data relating to command signals entered at said first input.17. A remote control device as defined in claim 14, wherein said useridentification data includes a biometrics parameter.
 18. A remotecontrol device as defined in claim 17, wherein said biometrics parameteris selected from the set consisting of fingerprint data, retinal scandata, voice recognition data, DNA data and body part shape/pattern data.19. A remote control device as defined in claim 14, wherein said useridentification data includes user-supplied information.
 20. A remotecontrol device as defined in claim 19, wherein said second inputincludes either one of a keypad and touch sensitive screen for enteringsaid user-supplied information.
 21. A remote control device as definedin claim 19, wherein said user-supplied information is stored on acomputer readable storage medium, said second input being adapted forreading said computer readable storage medium for extracting saiduser-supplied information.
 22. A remote control system for a locomotive,said remote control system comprising: (a) a remote control deviceincluding: (1) a first input for receiving an input command signal froma user, the input command signal being indicative of a command to beexecuted by the locomotive; (2) a second input distinct from said firstinput, said second input being adapted for receiving user identificationdata; (b) a user authentication unit in communication with said remotecontrol device, said user authentication unit being adapted for: (1)receiving the user identification data from said remote control device;and (2) processing the user identification data to generate verificationdata indicative of whether the user identification data belongs to anauthorized user; (c) a locomotive controller module suitable formounting at the locomotive, said locomotive controller module beingadapted for generating local control signals on the basis of commandsignals originating from said remote control device; (d) when theverification data indicates that the user identification data belongs toan authorized user, said locomotive controller module being operative toissue a local control signal for causing the locomotive to execute thecommand conveyed by the command signal received at the first input ofthe remote control device.
 23. A remote control system as defined inclaim 22, wherein said user authentication unit is part of said remotecontrol device.
 24. A remote control system as defined in claim 22,wherein said user authentication unit is part of said locomotivecontroller module.
 25. A method for controlling a locomotive, saidmethod comprising: (a) receiving at a first input a command signal froma user, the command signal being indicative of a command to be executedby the locomotive; (b) receiving at a second input distinct from saidfirst input user identification data, the second input being dedicatedfor receiving the user identification data; (c) transmitting a controlsignal indicative of the command to be executed by the locomotive whenthe user identification data belongs to an authorized user.
 26. A remotecontrol device for controlling a locomotive, said remote control devicecomprising: (a) a first input for receiving a command signal from auser, the command signal being indicative of a command to be executed bythe locomotive; (b) a second input operative to receive useridentification data from a machine readable storage medium; (c) a userauthentication unit operative for processing the user identificationdata to generate verification data indicative of whether the useridentification data belongs to an authorized user; (d) a processing unitoperative for transmitting a control signal indicative of the command tobe executed by the locomotive when the verification data indicates thatthe user identification data belongs to an authorized user.
 27. A remotecontrol device as defined in claim 26, wherein said second input isselected from the list consisting of a smart card reader, a magneticstrip reader, a diskette reader, a CD ROM.
 28. A remote control systemfor a locomotive, said remote control system comprising: (a) a remotecontrol device including: (1) a first input for receiving a commandsignal from a user, the command signal being indicative of an action tobe executed by the locomotive; (2) a second input operative to receiveuser identification data from a machine readable storage medium; (b) auser authentication unit in communication with said remote controldevice, said user authentication unit being adapted for: (1) receivingthe user identification data from said remote control device; and (2)processing the user identification data to generate verification dataindicative of whether the user identification data belongs to anauthorized user; (c) a locomotive controller module suitable formounting at the locomotive, said locomotive controller module beingadapted for generating local control signals on the basis of commandsignals originating from said remote control device; (d) when theverification data indicates that the user identification data belongs toan authorized user, said locomotive controller module being operative toissue a local control signal for causing the locomotive to execute theaction conveyed by the command signal received at the first input of theremote control device.
 29. A remote control device for controlling alocomotive, said remote control device comprising: (a) a first input forreceiving a command signal from a user, the command signal beingindicative of a command to be executed by the locomotive; (b) a secondinput operative to receive user identification data indicative of afingerprint; (c) a user authentication unit operative for processing theuser identification data to generate verification data indicative ofwhether the user identification data belongs to an authorized user; (d)a processing unit operative for transmitting a control signal indicativeof the command to be executed by the locomotive when the verificationdata indicates that the user identification data belongs to anauthorized user.
 30. A remote control system for a locomotive, saidremote control system comprising: (a) a remote control device including:(1) a first input for receiving a command signal from a user, thecommand signal being indicative of an action to be executed by thelocomotive; (2) a second input operative to receive user identificationdata indicative of a fingerprint; (b) a user authentication unit incommunication with said remote control device, said user authenticationunit being adapted for: (1) receiving the user identification data fromsaid remote control device; and (2) processing the user identificationdata to generate verification data indicative of whether the useridentification data belongs to an authorized user; (c) a locomotivecontroller module suitable for mounting at the locomotive, saidlocomotive controller module being adapted for generating local controlsignals on the basis of command signals originating from said remotecontrol device; (d) when the verification data indicates that the useridentification data belongs to an authorized user, said locomotivecontroller module being operative to issue a local control signal forcausing the locomotive to execute the action conveyed by the commandsignal received at the first input of the remote control device.
 31. Aremote control device for controlling a locomotive, said remote controldevice comprising: (a) a first input for receiving a command signal froma user, the command signal being indicative of a command to be executedby the locomotive; (b) a second input operative to receive useridentification data via a keypad; (c) a user authentication unitoperative for processing the user identification data to generateverification data indicative of whether the user identification databelongs to an authorized user; (d) a processing unit operative fortransmitting a control signal indicative of the command to be executedby the locomotive when the verification data indicates that the useridentification data belongs to an authorized user.
 32. A remote controlsystem for a locomotive, said remote control system comprising: (a) aremote control device including: (1) a first input for receiving acommand signal from a user, the command signal being indicative of anaction to be executed by the locomotive; (2) a second input operative toreceive user identification data via a keypad; (b) a user authenticationunit in communication with said remote control device, said userauthentication unit being adapted for: (1) receiving the useridentification data from said remote control device; and (2) processingthe user identification data to generate verification data indicative ofwhether the user identification data belongs to an authorized user; (c)a locomotive controller module suitable for mounting at the locomotive,said locomotive controller module being adapted for generating localcontrol signals on the basis of command signals originating from saidremote control device; (d) when the verification data indicates that theuser identification data belongs to an authorized user, said locomotivecontroller module being operative to issue a local control signal forcausing the locomotive to execute the action conveyed by the commandsignal received at the first input of the remote control device.
 33. Aremote control device for controlling a locomotive, said remote controldevice comprising: (a) a first input for receiving a command signal froma user, the command signal being indicative of a command to be executedby the locomotive; (b) a second input operative to receive useridentification data via a retina scanner; (c) a user authentication unitoperative for processing the user identification data to generateverification data indicative of whether the user identification databelongs to an authorized user; (d) a processing unit operative fortransmitting a control signal indicative of the command to be executedby the locomotive when the verification data indicates that the useridentification data belongs to an authorized user.
 34. A remote controlsystem for a locomotive, said remote control system comprising: (a) aremote control device including: (1) a first input for receiving acommand signal from a user, the command signal being indicative of anaction to be executed by the locomotive; (2) a second input operative toreceive user identification data via a retina scanner; (b) a userauthentication unit in communication with said remote control device,said user authentication unit being adapted for: (1) receiving the useridentification data from said remote control device; and (2) processingthe user identification data to generate verification data indicative ofwhether the user identification data belongs to an authorized user; (c)a locomotive controller module suitable for mounting at the locomotive,said locomotive controller module being adapted for generating localcontrol signals on the basis of command signals originating from saidremote control device; (d) when the verification data indicates that theuser identification data belongs to an authorized user, said locomotivecontroller module being operative to issue a local control signal forcausing the locomotive to execute the action conveyed by the commandsignal received at the first input of the remote control device.
 35. Aremote control device for controlling a locomotive, said remote controldevice comprising: (a) a first input for receiving a command signal froma user, the command signal being indicative of a command to be executedby the locomotive; (b) a second input operative to receive useridentification data indicative of DNA information; (c) a userauthentication device operative for processing the user identificationdata to generate verification data indicative of whether the useridentification data belongs to an authorized user; (d) a processing unitoperative for transmitting a control signal indicative of the command tobe executed by the locomotive when the verification data indicates thatthe user identification data belongs to an authorized user.
 36. A remotecontrol system for a locomotive, said remote control system comprising:(a) a remote control device including: (1) a first input for receiving acommand signal from a user, the command signal being indicative of anaction to be executed by the locomotive; (2) a second input operative toreceive user identification data indicative of DNA information; (b) auser authentication unit in communication with said remote controldevice, said user authentication unit being adapted for: (1) receivingthe user identification data from said remote control device; and (2)processing the user identification data to generate verification dataindicative of whether the user identification data belongs to anauthorized user; (c) a locomotive controller module suitable formounting at the locomotive, said locomotive controller module beingadapted for generating local control signals on the basis of commandsignals originating from said remote control device; (d) when theverification data indicates that the user identification data belongs toan authorized user, said locomotive controller module being operative toissue a local control signal for causing the locomotive to execute theaction conveyed by the command signal received at the first input of theremote control device.
 37. A remote control device for controlling alocomotive, said remote control device comprising: (a) a first input forreceiving a command signal from a user, the command signal beingindicative of a command to be executed by the locomotive; (b) a secondinput operative to receive user identification data; (c) said remotecontrol device being adapted to issue a prompt for indicating to a userto provide user identification data; (d) a processing unit operative totransmit a control signal indicative of a command to be executed by thelocomotive when the user identification data belongs to an authorizeduser.
 38. A remote control device as defined in claim 37, wherein saidprompt is an audio prompt.
 39. A remote control device as defined inclaim 37, wherein said prompt is a visual prompt.
 40. A remote controldevice as defined in claim 39, wherein said visual prompt is a flashinglight.
 41. A remote control device as defined in claim 39, wherein saidvisual prompt is a text message displayed to the user.
 42. A remotecontrol system for a locomotive, said remote control system comprising:(a) a remote control device including: (1) a first input for receiving acommand signal from a user, the command signal being indicative of anaction to be executed by the locomotive; (2) a second input operative toreceive user identification data, said remote control system beingoperative to prompt the user to input the user identification data; (b)a user authentication unit in communication with said remote controldevice, said user authentication unit being adapted for: (1) receivingthe user identification data from said remote control device; and (2)processing the user identification data to generate verification dataindicative of whether the user identification data belongs to anauthorized user; (c) a locomotive controller module suitable formounting at the locomotive, said locomotive controller module beingadapted for generating local control signals on the basis of commandsignals originating from said remote control device; (d) when theverification data indicates that the user identification data belongs toan authorized user, said locomotive controller module being operative toissue a local control signal for causing the locomotive to execute theaction conveyed by the command signal received at the first input of theremote control device.
 43. A remote control device for controlling alocomotive, said remote control device comprising: (a) a first input forreceiving a command signal from a user, the command signal beingindicative of a command to be executed by the locomotive; (b) a secondinput operative to receive user identification data; (c) anauthentication unit operative for processing the user identificationdata to generate verification data indicative of whether the useridentification data belongs to an authorized user; (d) a processing unitoperative to: (1) transmit a control signal indicative of a command tobe executed by the locomotive when the user authentication unit confirmsthat the user identification data belongs to an authorized user; inresponse to a transmission termination event, said processing unit beingadapted to cease the transmission of control signals indicative ofcommands to be executed by the locomotive.
 44. A remote control deviceas defined in claim 43, wherein said transmission termination eventincludes a termination signal.
 45. A remote control device as defined inclaim 44, wherein said remote control device includes an input forenabling a user to enter the termination signal.
 46. A remote controldevice as defined in claim 43, wherein said transmission terminationevent is the expiration of a time delay commencing upon receipt of asignal indicative of user identification data at said second input ofsaid remote control device, wherein the user identification data isassociated to an authorized user.
 47. A remote control device as definedin claim 46, wherein said time delay is a pre-determined period of time.48. A remote control device as defined in claim 43, wherein saidtransmission termination event is the expiration of a time delay duringwhich no signal indicative of a command to be executed by the locomotiveis received at said first input of said remote control device.
 49. Aremote control device as defined in claim 43, wherein, said processingunit is operative for resuming the transmission of control signals whennew user identification data received at said second input subsequent toreceipt of a transmission termination event, belongs to an authorizeduser.
 50. A remote control system for a locomotive, said remote controlsystem comprising: (a) a remote control device including: (1) a firstinput for receiving a command signal from a user, the command signalbeing indicative of an action to be executed by the locomotive; (2) asecond input operative to receive user identification data; (b) a userauthentication unit in communication with said remote control device,said user authentication unit being adapted for: (1) receiving the useridentification data from said remote control device; and (2) processingthe user identification data to generate verification data indicative ofwhether the user identification data belongs to an authorized user; (c)a locomotive controller module suitable for mounting at the locomotive,said locomotive controller module being operative for: (1) generatinglocal control signals on the basis of command signals originating fromsaid remote control device; (2) issuing a local control signal forcausing the locomotive to execute the action conveyed by the commandsignal received at the first input of the remote control device, whenthe verification data indicates that the user identification databelongs to an authorized user, (d) in response to a transmissiontermination event, said locomotive controller module being adapted tocease the transmission of local control signals.
 51. A system as definedin claim 50, wherein said transmission termination event includes atermination signal.
 52. A system as defined in claim 51, wherein saidsystem includes an input for enabling a user to enter the terminationsignal.
 53. A system as defined in claim 50, wherein said transmissiontermination event is the expiration of a time delay commencing uponreceipt of a signal indicative of user identification data at saidsecond input of said remote control device, wherein the useridentification data is associated to an authorized user.
 54. A system asdefined in claim 53, wherein said time delay is a predetermined periodof time.
 55. A system as defined in claim 50, wherein said transmissiontermination event is the expiration of a time delay during which nosignal indicative of a command to be executed by the locomotive isreceived at said first input of said remote control device.
 56. A systemas defined in claim 50, wherein said locomotive controller module isadapted for resuming the transmission of local control signals when newuser identification data received at the second input of said remotecontrol device belongs to an authorized user.